Vendor
Trend Micro vulnerabilities
160 advisories tracked, 12 exploited in the wild according to CISA, 19 published in 2026.
Data refreshed 12 Oct 2026
Patch now
Exploited in the last two years (CISA KEV), or a 10%+ chance of exploitation in the next 30 days (EPSS).
CVE-2026-34926Apex One and Apex Central
Apex One (On-Premise) Directory TraversalCVE-2025-54948Apex One and Apex Central
Apex One OS Command InjectionCVE-2025-54987Apex One and Apex Central
A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated rem…CVE-2025-49213Apex One and Apex Central
An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a p…CVE-2025-49212Apex One and Apex Central
An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a p…CVE-2023-32521Gateways and Deep Discovery
A path traversal exists in a specific service dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which…
Show all 7Show fewer
CVE-2023-0587Apex One and Apex Central
File upload in Trend Micro Apex One
Products covered
Select a product to see only its advisories.
- Apex One and Apex CentralEndpoint protection (formerly OfficeScan), its SaaS version and the management console128 tracked
- Trend Vision OneThe XDR platform, its endpoint agent and Service Gateway5 tracked
- Deep Security and Cloud OneServer and workload protection, agent and manager9 tracked
- Worry-Free Business SecuritySmall-business endpoint protection, on-premises and Services8 tracked
- Gateways and Deep DiscoveryInterScan web and mail gateways, Deep Discovery, Mobile Security and other enterprise products16 tracked
All tracked advisories
Newest first. Full analysis marks the CVEs we've written up in depth; the rest link to an automatic summary.
| Published | CVE | Product | Issue | Severity | EPSS | Exploited |
|---|---|---|---|---|---|---|
| CVE-2026-45208 | Apex One and Apex Central | Time-of-check time-of-use in TrendAI Apex One, TrendAI Apex One as a Service | HIGH 7.8 | 0.13% | – | |
| CVE-2026-45207 | Apex One and Apex Central | Origin validation in TrendAI Apex One, TrendAI Apex One as a Service | HIGH 7.8 | 0.10% | – | |
| CVE-2026-45206 | Apex One and Apex Central | Origin validation in TrendAI Apex One, TrendAI Apex One as a Service | HIGH 7.8 | 0.10% | – | |
| CVE-2026-34930 | Apex One and Apex Central | Origin validation in TrendAI Apex One, TrendAI Apex One as a Service | HIGH 7.8 | 0.10% | – | |
| CVE-2026-34929 | Apex One and Apex Central | Origin validation in TrendAI Apex One, TrendAI Apex One as a Service | HIGH 7.8 | 0.10% | – | |
| CVE-2026-34928 | Apex One and Apex Central | Origin validation in TrendAI Apex One, TrendAI Apex One as a Service | HIGH 7.8 | 0.10% | – | |
| CVE-2026-34927 | Apex One and Apex Central | Origin validation in TrendAI Apex One, TrendAI Apex One as a Service | HIGH 7.8 | 0.10% | – | |
| CVE-2026-34926Full analysis | Apex One and Apex Central | Apex One (On-Premise) Directory Traversal | MEDIUM 6.7 | 0.54% | Yes | |
| CVE-2025-71217 | Apex One and Apex Central | Origin validation error in TrendAI Apex One (Mac) | HIGH 7.8 | 0.29% | – | |
| CVE-2025-71216 | Apex One and Apex Central | Time-of-check time-of-use in TrendAI Apex One (Mac) | HIGH 7.8 | 0.32% | – | |
| CVE-2025-71215 | Apex One and Apex Central | Time-of-check time-of-use in TrendAI Apex One (Mac) | HIGH 7 | 0.30% | – | |
| CVE-2025-71214 | Apex One and Apex Central | Origin validation error in TrendAI Apex One (Mac) | HIGH 7.8 | 0.36% | – | |
| CVE-2025-71213 | Apex One and Apex Central | Origin validation error in TrendAI Apex One, TrendAI Apex One as a Service | HIGH 7.8 | 0.34% | – | |
| CVE-2025-71212 | Apex One and Apex Central | Link following in TrendAI Apex One, TrendAI Apex One as a Service | HIGH 7.8 | 0.54% | – | |
| CVE-2025-71211 | Apex One and Apex Central | A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload mali… | CRITICAL 9.8 | 3.8% | – | |
| CVE-2025-71210 | Apex One and Apex Central | A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload mali… | CRITICAL 9.8 | 3.8% | – | |
| CVE-2025-69260 | Apex One and Apex Central | Message out-of-bounds read in Trend Micro Apex Central | HIGH 7.5 | 1.6% | – | |
| CVE-2025-69259 | Apex One and Apex Central | Message unchecked NULL return value in Trend Micro Apex Central | HIGH 7.5 | 1.6% | – | |
| CVE-2025-69258 | Apex One and Apex Central | LoadLibraryEX in Trend Micro Apex Central | CRITICAL 9.8 | 3.6% | – | |
| CVE-2025-54987 | Apex One and Apex Central | A vulnerability in Trend Micro Apex One (on-premise) management console could allow a pre-authenticated rem… | CRITICAL 9.4 | 20% | – | |
| CVE-2025-54948 | Apex One and Apex Central | Apex One OS Command Injection | CRITICAL 9.4 | 24% | Yes | |
| CVE-2025-53378 | Worry-Free Business Security | Missing authentication in Trend Micro Worry-Free Business Security Services | HIGH 7.6 | 0.78% | – | |
| CVE-2025-49218 | Apex One and Apex Central | Post-auth SQL injection in Trend Micro Endpoint Encryption Policy Server | HIGH 7.7 | 0.13% | – | |
| CVE-2025-49217 | Apex One and Apex Central | An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a p… | CRITICAL 9.8 | 1.1% | – | |
| CVE-2025-49216 | Apex One and Apex Central | Authentication bypass in Trend Micro Endpoint Encryption Policy Server | CRITICAL 9.8 | 0.55% | – | |
| CVE-2025-49215 | Apex One and Apex Central | Post-auth SQL injection in Trend Micro Endpoint Encryption Policy Server | HIGH 8.8 | 0.33% | – | |
| CVE-2025-49214 | Apex One and Apex Central | An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a p… | HIGH 8.8 | 0.84% | – | |
| CVE-2025-49213 | Apex One and Apex Central | An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a p… | CRITICAL 9.8 | 13% | – | |
| CVE-2025-49212 | Apex One and Apex Central | An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a p… | CRITICAL 9.8 | 13% | – | |
| CVE-2025-49211 | Apex One and Apex Central | SQL injection in Trend Micro Endpoint Encryption Policy Server | HIGH 7.7 | 0.13% | – | |
| CVE-2025-30642 | Deep Security and Cloud One | Link following in Trend Micro Deep Security | MEDIUM 5.5 | 0.17% | – | |
| CVE-2025-30641 | Deep Security and Cloud One | Link following in Trend Micro Deep Security | HIGH 7.8 | 0.19% | – | |
| CVE-2025-30640 | Deep Security and Cloud One | Link following in Trend Micro Deep Security | HIGH 7.8 | 0.19% | – | |
| CVE-2025-30680 | Apex One and Apex Central | Server-side Request Forgery (SSRF) in Trend Micro Apex Central | HIGH 7.5 | 0.30% | – | |
| CVE-2025-30679 | Apex One and Apex Central | Server-side Request Forgery (SSRF) in Trend Micro Apex Central | MEDIUM 6.5 | 0.36% | – | |
| CVE-2025-30678 | Apex One and Apex Central | Server-side Request Forgery (SSRF) in Trend Micro Apex Central | MEDIUM 6.5 | 0.36% | – | |
| CVE-2025-49487 | Worry-Free Business Security | Uncontrolled search path in Trend Micro Worry-Free Business Security Services | MEDIUM 6.8 | 0.28% | – | |
| CVE-2025-49158 | Apex One and Apex Central | Uncontrolled search path in Trend Micro Apex One, Trend Micro Apex One as a Service | MEDIUM 6.7 | 0.16% | – | |
| CVE-2025-49157 | Apex One and Apex Central | Link following in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.19% | – | |
| CVE-2025-49156 | Apex One and Apex Central | Link following in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7 | 0.15% | – | |
| CVE-2025-49155 | Apex One and Apex Central | Uncontrolled search path in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 8.8 | 0.92% | – | |
| CVE-2025-49154 | Apex One and Apex Central | Insecure access control in Worry-Free Business Security, Trend Micro Apex One and others | HIGH 8.7 | 0.12% | – | |
| CVE-2025-49220 | Apex One and Apex Central | An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pr… | CRITICAL 9.8 | 2.1% | – | |
| CVE-2025-49219 | Apex One and Apex Central | An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a p… | CRITICAL 9.8 | 1.4% | – | |
| CVE-2025-47867 | Apex One and Apex Central | Local File Inclusion in Trend Micro Apex Central | HIGH 7.5 | 1.9% | – | |
| CVE-2025-47866 | Apex One and Apex Central | Unrestricted file upload in Trend Micro Apex Central | MEDIUM 4.3 | 0.30% | – | |
| CVE-2025-47865 | Apex One and Apex Central | Local File Inclusion in Trend Micro Apex Central | HIGH 7.5 | 1.8% | – | |
| CVE-2025-31286 | Trend Vision One | HTML injection in Trend Vision One | MEDIUM 4.6 | 0.45% | – | |
| CVE-2025-31285 | Trend Vision One | Broken access control in Trend Vision One | MEDIUM 4.6 | 0.27% | – | |
| CVE-2025-31284 | Trend Vision One | Broken access control in Trend Vision One | MEDIUM 4.6 | 0.27% | – | |
| CVE-2025-31283 | Trend Vision One | Broken access control in Trend Vision One | MEDIUM 4.6 | 0.27% | – | |
| CVE-2025-31282 | Trend Vision One | Broken access control in Trend Vision One | MEDIUM 4.6 | 0.27% | – | |
| CVE-2024-58105 | Apex One and Apex Central | A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a lo… | HIGH 7.3 | 0.16% | – | |
| CVE-2024-58104 | Apex One and Apex Central | A vulnerability in the Trend Micro Apex One Security Agent Plug-in User Interface Manager could allow a lo… | HIGH 7.3 | 0.16% | – | |
| CVE-2024-55955 | Deep Security and Cloud One | Incorrect permissions assignment in Trend Micro Deep Security | MEDIUM 6.7 | 0.14% | – | |
| CVE-2024-55917 | Apex One and Apex Central | Origin validation error in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.26% | – | |
| CVE-2024-55632 | Apex One and Apex Central | Security agent link following in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.33% | – | |
| CVE-2024-55631 | Apex One and Apex Central | Engine link following in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.33% | – | |
| CVE-2024-52050 | Apex One and Apex Central | LogServer arbitrary file creation in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.48% | – | |
| CVE-2024-52049 | Apex One and Apex Central | LogServer link following in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.33% | – | |
| CVE-2024-52048 | Apex One and Apex Central | LogServer link following in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.33% | – | |
| CVE-2024-52047 | Apex One and Apex Central | Widget local file inclusion in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.5 | 1.1% | – | |
| CVE-2024-51503 | Deep Security and Cloud One | Security agent manual scan command injection in Trend Micro Deep Security | HIGH 8 | 4.0% | – | |
| CVE-2024-48904 | Gateways and Deep Discovery | Command injection in Trend Micro Cloud Edge | CRITICAL 9.8 | 2.4% | – | |
| CVE-2024-48903 | Deep Security and Cloud One | Improper access control in Trend Micro Deep Security Agent | HIGH 7.8 | 0.75% | – | |
| CVE-2024-46903 | Gateways and Deep Discovery | A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacke… | MEDIUM 6.5 | 1.2% | – | |
| CVE-2024-46902 | Gateways and Deep Discovery | A vulnerability in Trend Micro Deep Discovery Inspector (DDI) versions 5.8 and above could allow an attacke… | MEDIUM 4.9 | 0.69% | – | |
| CVE-2024-39753 | Apex One and Apex Central | ModOSCE SQL Injection in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.5 | 2.0% | – | |
| CVE-2024-37289 | Apex One and Apex Central | Improper access control in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.63% | – | |
| CVE-2024-36359 | Gateways and Deep Discovery | Cross-site scripting (XSS) in Trend Micro InterScan Web Security Virtual Appliance | MEDIUM 5.4 | 0.38% | – | |
| CVE-2024-36358 | Deep Security and Cloud One | Link following in Trend Micro Deep Security Agent | HIGH 7.8 | 0.53% | – | |
| CVE-2024-36307 | Apex One and Apex Central | Security agent link following in Trend Micro Apex One, Trend Micro Apex One as a Service | MEDIUM 4.7 | 0.78% | – | |
| CVE-2024-36306 | Apex One and Apex Central | Link following in Trend Micro Apex One, Trend Micro Apex One as a Service | MEDIUM 6.1 | 0.61% | – | |
| CVE-2024-36305 | Apex One and Apex Central | Security agent link following in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.89% | – | |
| CVE-2024-36304 | Apex One and Apex Central | Time-of-Check Time-Of-Use in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.40% | – | |
| CVE-2024-36303 | Apex One and Apex Central | Origin validation in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.35% | – | |
| CVE-2024-36302 | Apex One and Apex Central | Origin validation in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.55% | – | |
| CVE-2023-52338 | Deep Security and Cloud One | Link following in Trend Micro Deep Security Agent | HIGH 7.8 | 0.31% | – | |
| CVE-2023-52337 | Deep Security and Cloud One | Improper access control in Trend Micro Deep Security Agent | HIGH 7.8 | 0.24% | – | |
| CVE-2023-52331 | Apex One and Apex Central | Post-authenticated server-side request forgery (SSRF) in Trend Micro Apex Central | HIGH 7.1 | 0.55% | – | |
| CVE-2023-52330 | Apex One and Apex Central | Cross-site scripting in Trend Micro Apex Central | MEDIUM 6.1 | 2.4% | – | |
| CVE-2023-52329 | Apex One and Apex Central | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (… | MEDIUM 6.1 | 0.94% | – | |
| CVE-2023-52328 | Apex One and Apex Central | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (… | MEDIUM 6.1 | 2.5% | – | |
| CVE-2023-52327 | Apex One and Apex Central | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (… | MEDIUM 6.1 | 2.5% | – | |
| CVE-2023-52326 | Apex One and Apex Central | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (… | MEDIUM 6.1 | 2.5% | – | |
| CVE-2023-52325 | Apex One and Apex Central | Local file inclusion in Trend Micro Apex Central | HIGH 7.5 | 4.5% | – | |
| CVE-2023-52324 | Apex One and Apex Central | Unrestricted file upload in Trend Micro Apex Central | HIGH 8.8 | 4.1% | – | |
| CVE-2023-52094 | Apex One and Apex Central | Updater link following in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.31% | – | |
| CVE-2023-52093 | Apex One and Apex Central | Exposed dangerous function in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.4 | 0.22% | – | |
| CVE-2023-52092 | Apex One and Apex Central | Security agent link following in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.31% | – | |
| CVE-2023-52091 | Apex One and Apex Central | Anti-spyware engine link following in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.31% | – | |
| CVE-2023-52090 | Apex One and Apex Central | Security agent link following in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.31% | – | |
| CVE-2023-47202 | Apex One and Apex Central | Local file inclusion in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.48% | – | |
| CVE-2023-47201 | Apex One and Apex Central | Plug-in manager origin validation in Trend Micro Apex One, Trend Micro Apex One as a Service | MEDIUM 6.7 | 0.14% | – | |
| CVE-2023-47200 | Apex One and Apex Central | Plug-in manager origin validation in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.12% | – | |
| CVE-2023-47199 | Apex One and Apex Central | Origin validation in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.12% | – | |
| CVE-2023-47198 | Apex One and Apex Central | Origin validation in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.12% | – | |
| CVE-2023-47197 | Apex One and Apex Central | Origin validation in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.12% | – | |
| CVE-2023-47196 | Apex One and Apex Central | Origin validation in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.12% | – | |
| CVE-2023-47195 | Apex One and Apex Central | Origin validation in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.12% | – | |
| CVE-2023-47194 | Apex One and Apex Central | Origin validation in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.12% | – | |
| CVE-2023-47193 | Apex One and Apex Central | Origin validation in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.14% | – | |
| CVE-2023-47192 | Apex One and Apex Central | Agent link in Trend Micro Apex One, Trend Micro Apex One as a Service | HIGH 7.8 | 0.24% | – | |
| CVE-2023-41178 | Gateways and Deep Discovery | Reflected cross-site scripting (XSS) in Trend Micro Mobile Security for Enterprise | MEDIUM 6.1 | 1.6% | – | |
| CVE-2023-41177 | Gateways and Deep Discovery | Reflected cross-site scripting (XSS) in Trend Micro Mobile Security for Enterprise | MEDIUM 6.1 | 0.46% | – | |
| CVE-2023-41176 | Gateways and Deep Discovery | Reflected cross-site scripting (XSS) in Trend Micro Mobile Security for Enterprise | MEDIUM 6.1 | 1.6% | – | |
| CVE-2023-38627 | Apex One and Apex Central | Post-authenticated server-side request forgery (SSRF) in Trend Micro Apex Central | MEDIUM 5.4 | 0.32% | – | |
| CVE-2023-38626 | Apex One and Apex Central | Post-authenticated server-side request forgery (SSRF) in Trend Micro Apex Central | MEDIUM 5.4 | 0.32% | – | |
| CVE-2023-38625 | Apex One and Apex Central | Post-authenticated server-side request forgery (SSRF) in Trend Micro Apex Central | MEDIUM 5.4 | 0.32% | – | |
| CVE-2023-38624 | Apex One and Apex Central | Post-authenticated server-side request forgery (SSRF) in Trend Micro Apex Central | MEDIUM 5.4 | 0.33% | – | |
| CVE-2023-41179 | Apex One and Apex Central | Apex One and Worry-Free Business Security Remote Code Execution | HIGH 7.2 | 4.3% | Yes | |
| CVE-2023-35695 | Gateways and Deep Discovery | Remote attacker could leverage a in Trend Micro Moibile Security for Enterprise | – | 1.5% | – | |
| CVE-2023-34148 | Apex One and Apex Central | Exposed dangerous function in Trend Micro Apex One | – | 0.23% | – | |
| CVE-2023-34147 | Apex One and Apex Central | Exposed dangerous function in Trend Micro Apex One | – | 0.23% | – | |
| CVE-2023-34146 | Apex One and Apex Central | Exposed dangerous function in Trend Micro Apex One | – | 0.23% | – | |
| CVE-2023-34145 | Apex One and Apex Central | Untrusted search path in Trend Micro Apex One | – | 0.31% | – | |
| CVE-2023-34144 | Apex One and Apex Central | Untrusted search path in Trend Micro Apex One | – | 0.31% | – | |
| CVE-2023-32605 | Apex One and Apex Central | Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected… | – | 0.33% | – | |
| CVE-2023-32604 | Apex One and Apex Central | Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected… | – | 0.33% | – | |
| CVE-2023-32557 | Apex One and Apex Central | Path traversal in Trend Micro Apex One | – | 1.2% | – | |
| CVE-2023-32556 | Apex One and Apex Central | Link following in Trend Micro Apex One | – | 0.29% | – | |
| CVE-2023-32555 | Apex One and Apex Central | Time-of-Check Time-Of-Use in Trend Micro Apex One | – | 0.18% | – | |
| CVE-2023-32554 | Apex One and Apex Central | Time-of-Check Time-Of-Use in Trend Micro Apex One | – | 0.18% | – | |
| CVE-2023-32553 | Apex One and Apex Central | Improper access control in Trend Micro Apex One | – | 0.49% | – | |
| CVE-2023-32552 | Apex One and Apex Central | Improper access control in Trend Micro Apex One | – | 0.63% | – | |
| CVE-2023-32537 | Apex One and Apex Central | Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected… | – | 0.33% | – | |
| CVE-2023-32536 | Apex One and Apex Central | Affected versions Trend Micro Apex Central (on-premise) are vulnerable to potential authenticated reflected… | – | 0.33% | – | |
| CVE-2023-32535 | Apex One and Apex Central | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (… | – | 1.9% | – | |
| CVE-2023-32534 | Apex One and Apex Central | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (… | – | 0.68% | – | |
| CVE-2023-32533 | Apex One and Apex Central | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (… | – | 1.9% | – | |
| CVE-2023-32532 | Apex One and Apex Central | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (… | – | 1.9% | – | |
| CVE-2023-32531 | Apex One and Apex Central | Certain dashboard widgets on Trend Micro Apex Central (on-premise) are vulnerable to cross-site scripting (… | – | 1.9% | – | |
| CVE-2023-32530 | Apex One and Apex Central | Vulnerable modules of Trend Micro Apex Central (on-premise) contain in Trend Micro Apex Central | – | 2.4% | – | |
| CVE-2023-32529 | Apex One and Apex Central | Vulnerable modules of Trend Micro Apex Central (on-premise) contain in Trend Micro Apex Central | – | 2.2% | – | |
| CVE-2023-32528 | Gateways and Deep Discovery | Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote a… | – | 3.0% | – | |
| CVE-2023-32527 | Gateways and Deep Discovery | Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains vulnerable .php files that could allow a remote a… | – | 2.9% | – | |
| CVE-2023-32526 | Gateways and Deep Discovery | Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget in Trend Micro Moibile Security for Enterprise | – | 2.0% | – | |
| CVE-2023-32525 | Gateways and Deep Discovery | Trend Micro Mobile Security (Enterprise) 9.8 SP5 contains widget in Trend Micro Moibile Security for Enterprise | – | 2.0% | – | |
| CVE-2023-32524 | Gateways and Deep Discovery | Affected versions of Trend Micro Mobile Security (Enterprise) 9.8 SP5 contain some widgets that would allow… | – | 2.6% | – | |
| CVE-2023-32523 | Gateways and Deep Discovery | Affected versions of Trend Micro Mobile Security (Enterprise) 9.8 SP5 contain some widgets that would allow… | – | 2.6% | – | |
| CVE-2023-32522 | Gateways and Deep Discovery | A path traversal exists in a specific dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could a… | – | 3.3% | – | |
| CVE-2023-32521 | Gateways and Deep Discovery | A path traversal exists in a specific service dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which… | – | 67% | – | |
| CVE-2023-30902 | Apex One and Apex Central | Privilege escalation in Trend Micro Apex One | – | 0.13% | – | |
| CVE-2023-28005 | Apex One and Apex Central | A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could… | MEDIUM 6.8 | 0.20% | – | |
| CVE-2023-25148 | Apex One and Apex Central | Security agent link following in Trend Micro Apex One | HIGH 7.8 | 0.39% | – | |
| CVE-2023-25147 | Apex One and Apex Central | An issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrati… | MEDIUM 6.7 | 0.23% | – | |
| CVE-2023-25146 | Apex One and Apex Central | Security agent link following in Trend Micro Apex One | HIGH 7.8 | 0.39% | – | |
| CVE-2023-25145 | Apex One and Apex Central | Link following in Trend Micro Apex One | HIGH 7.8 | 0.39% | – | |
| CVE-2023-25144 | Apex One and Apex Central | Improper access control in Trend Micro Apex One | HIGH 7.8 | 0.30% | – | |
| CVE-2023-25143 | Apex One and Apex Central | Uncontrolled search path element in Trend Micro Apex One | CRITICAL 9.8 | 1.7% | – | |
| CVE-2023-0587 | Apex One and Apex Central | File upload in Trend Micro Apex One | CRITICAL 9.1 | 60% | – | |
| CVE-2022-40139 | Apex One and Apex Central | Apex One and Apex One as a Service Improper Validation | HIGH 7.2 | 3.3% | Yes | |
| CVE-2022-26871 | Apex One and Apex Central | Apex Central Arbitrary File Upload | CRITICAL 9.8 | 19% | Yes | |
| CVE-2021-36742 | Apex One and Apex Central | Multiple Products Improper Input Validation | HIGH 7.8 | 1.5% | Yes | |
| CVE-2021-36741 | Apex One and Apex Central | Multiple Products Improper Input Validation | HIGH 8.8 | 5.0% | Yes | |
| CVE-2020-24557 | Apex One and Apex Central | Multiple Products Improper Access Control | HIGH 7.8 | 2.7% | Yes | |
| CVE-2020-8599 | Apex One and Apex Central | Apex One and OfficeScan Authentication Bypass | CRITICAL 9.8 | 12% | Yes | |
| CVE-2020-8467 | Apex One and Apex Central | Apex One and OfficeScan Remote Code Execution | HIGH 8.8 | 11% | Yes | |
| CVE-2020-8468 | Apex One and Apex Central | Multiple Products Content Validation Escape | HIGH 8.8 | 6.2% | Yes | |
| CVE-2019-18187 | Apex One and Apex Central | OfficeScan Directory Traversal | HIGH 8.8 | 25% | Yes |
Sources: Trend Micro security advisories, CISA KEV and FIRST EPSS. Severity is the vendor's own rating.